Privacy Policy

How SquareLocator collects, uses, stores, and shares personal data when you use our website and services.

Effective date: 9 July 2026

This Privacy Policy explains how SquareLocator (“we”, “us”, or “our”) collects, uses, stores, and shares personal data when you visit squarelocator.com, subscribe to our newsletter, contact us, or use any related services (together, the “Services”).

SquareLocator is a curated marketplace for the Squarespace community. We help visitors discover Squarespace templates, plugins, tools, courses, and third-party extensions. In many cases we link to creators’ and partners’ websites; when you leave SquareLocator, their privacy policies apply.

Who we are

The data controller for personal data collected through the Services is SquareLocator, operated by Altitude, a UK web design studio founded by Miles Noble.

For privacy questions or requests, contact us at hello@squarelocator.com or through our Contact page.

Our store and website are hosted on Shopify. Shopify processes personal data on our behalf as a processor for hosting, checkout, fraud prevention, and related commerce infrastructure, in line with Shopify’s agreements and policies.

Personal data we collect

Depending on how you use the Services, we may collect:

  • Identity and contact data such as your name, email address, phone number, billing or delivery address, and other details you provide when you contact us, create an account, or complete a purchase on our store.
  • Transaction data such as products viewed or purchased, order value, payment status, and customer service correspondence.
  • Newsletter and marketing data if you join SquareLocator+ or otherwise subscribe to emails from us, including your email address and subscription preferences.
  • Technical and usage data such as IP address, device and browser type, general location derived from IP, pages viewed, referring URLs, search queries on our site, and timestamps. Some of this is collected automatically through cookies and similar technologies.
  • Communications when you send us a message through our contact form or by email.

We do not intentionally collect special categories of personal data (such as health information) through this site unless you voluntarily include them in a free-text field. Please avoid sending sensitive information unless we explicitly ask for it.

How we use personal data and lawful bases

Under the UK GDPR and EU GDPR (as applicable), we rely on one or more of the following lawful bases:

  • Contract — to process orders, deliver products or services you buy from us, manage your account, and provide customer support.
  • Legitimate interests — to operate, secure, and improve SquareLocator; to understand how visitors use the site; to prevent fraud and misuse; and to recommend relevant Squarespace resources. You may object to certain processing as described under “Your rights”.
  • Legal obligation — to meet accounting, tax, and regulatory requirements.
  • Consent — where required for non-essential cookies, marketing emails, or other processing that is not strictly necessary. You may withdraw consent at any time.
Affiliate links and third-party sites

SquareLocator includes links to third-party websites, including Squarespace creators, tool providers, and affiliate partners. If you click an affiliate link and make a purchase on another site, that third party collects and processes your data under its own privacy policy. We do not control those sites and are not responsible for their practices.

Sharing and service providers

We share personal data with service providers who help us run SquareLocator, including where applicable:

  • Shopify — ecommerce platform, hosting, checkout, and store infrastructure.
  • Payment providers — to process card and other payment methods for orders placed on our store.
  • Email and marketing tools — to send newsletters, transactional messages, and service communications in line with your preferences.
  • Analytics providers — to understand site traffic and performance, where enabled and permitted by law.
  • Professional advisers — such as accountants or lawyers, where reasonably necessary.

We require processors to protect personal data appropriately and to process it only on our instructions. We do not sell your personal data for money.

International transfers

Shopify and some other providers may process data in the United Kingdom, the European Economic Area, the United States, and other countries. Where personal data is transferred from the UK or EEA to countries without an adequacy decision, we rely on appropriate safeguards such as the UK International Data Transfer Agreement / Addendum or the EU Standard Contractual Clauses, supplemented where needed by technical and organisational measures.

You may request further information about transfers by contacting us.

Retention

We keep personal data only as long as necessary for the purposes described in this policy, including to satisfy legal, accounting, or reporting requirements. For example, we typically retain order records for the period required by UK tax law, marketing consent records until you unsubscribe, and security logs for a limited period.

When data is no longer needed, we delete or anonymise it.

Security

We use appropriate technical and organisational measures designed to protect personal data against accidental loss, unauthorised access, alteration, or disclosure. No method of transmission over the Internet is completely secure, and we cannot guarantee absolute security.

Your rights

Depending on your location, you may have the following rights in relation to your personal data:

  • Right of access
  • Right to rectification
  • Right to erasure in certain cases
  • Right to restriction of processing
  • Right to data portability
  • Right to object to processing based on legitimate interests or for direct marketing
  • Right to withdraw consent where processing is based on consent

UK residents may lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk. EU residents may contact their local supervisory authority.

To exercise your rights, email hello@squarelocator.com. We may need to verify your identity before responding.

Marketing and newsletters

If you join SquareLocator+ or otherwise opt in to marketing, we will send curated recommendations, updates, and related content by email. You can unsubscribe at any time using the link in any marketing email or by contacting us.

We may still send transactional messages about orders or enquiries where necessary to perform our contract with you or respond to your request.

Cookies and similar technologies

We use cookies and similar technologies to operate the site (for example session and cart cookies), remember preferences, measure performance, and support analytics where configured.

Where required by law, we obtain consent before non-essential cookies run, including through Shopify’s cookie banner and preference tools on our store. You can manage cookie choices through that banner or your browser settings.

Children

The Services are not directed at children under 16 (or the age required in your jurisdiction). We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us and we will take steps to delete it.

Third-party websites

Our site links to third-party websites, including Squarespace, creators, and tool providers. This policy does not apply to those sites. Please read their privacy notices before providing personal data to them.

Changes to this policy

We may update this Privacy Policy from time to time. The effective date at the top will change when we publish a new version. Where required by law, we will provide additional notice of material changes.

Contact us

For privacy questions or requests, contact us at hello@squarelocator.com or through our Contact page.